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ABSTRACT OF THE INVENTION 

A method and apparatus for fragmenting and reassembling IKE protocol data packets 
that exceed a Maximum Transmission Unit is provided. A transmitting node determines 
whether to fragment IKE data depending on whether the receiving node has the capability to 
receive and reassemble fragmented data packets. The transmitting node detects whether 
fragmentation is appropriate and then intercepts and fragments appropriate IKE payloads for 
transmission over a network. The invention further includes a method and apparatus for 
reassembling fragmented IKE payloads. The receiving node discards certain packets 
according to a set of predetermined rules that are designed to prevent denial of service 
attacks and other similar attacks. No modification is required to the existing IKE protocol or 
to other lower level networking protocols. 


